Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: y2S18fqkRShQTzt6jDrTYNb4jen0ww19tuvAfNRcoIA=
Subject key identifier: E5:2D:23:74:FD:36:34:ED:C2:85:C9:CD:1F:7D:F6:3A:6B:15:B1:60
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 01A1DE7169F54523CB3E04C7CA4D8AE56FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 11DC
Signing time: Sun 15 Nov 2026 09:02:16 +0000
Manifest this update: Sun 15 Nov 2026 09:02:16 +0000
Manifest next update: Mon 16 Nov 2026 09:02:16 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: OrnApPzP4/U8PljaT17uEci0yQp4Iq0+9FJUBVAe8Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:69:f5:45:23:cb:3e:04:c7:ca:4d:8a:e5:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Nov 15 09:02:16 2026 GMT
Not After : Nov 16 09:02:16 2026 GMT
Subject: CN=e52d2374fd3634edc285c9cd1f7df63a6b15b160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:bd:c5:80:c6:c6:75:13:b7:eb:e4:22:f6:
d0:4d:5a:2e:fc:8b:82:c1:bb:54:62:13:18:af:f6:
65:da:8c:8d:03:3a:4d:9f:81:8f:ff:92:94:25:4f:
d0:cc:69:f0:db:e5:9b:15:e3:c7:1f:fa:ef:eb:5d:
c4:11:f9:6a:93:a5:33:b6:77:57:f3:30:dd:d1:65:
13:10:35:88:3b:4a:b1:1f:54:75:da:e7:fb:53:91:
e7:1c:9c:4a:1e:ee:db:52:30:7b:d1:91:18:9c:a3:
9d:04:94:1d:99:7b:f3:18:e7:1d:0d:da:56:23:3c:
4f:3a:91:e0:66:89:0e:4c:a7:74:02:42:45:c0:79:
0c:e9:d6:9e:93:6f:44:f6:ad:80:46:86:61:61:83:
fb:d4:49:9b:7a:ba:96:05:85:e7:b1:aa:cc:94:89:
9f:4c:cc:de:9e:cf:75:63:3d:48:12:97:46:21:5c:
6b:07:ce:8d:e4:28:42:32:ca:07:87:72:a3:78:13:
70:e3:b0:93:8e:30:b5:20:42:7a:c5:9f:18:80:89:
89:42:ae:f2:c1:93:73:3f:d8:fa:3d:7a:77:73:01:
3a:d6:7b:f0:aa:47:d3:09:2e:59:70:c8:a2:84:1f:
8e:d6:98:3e:8b:df:1a:ea:50:59:1b:a1:09:22:de:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:23:74:FD:36:34:ED:C2:85:C9:CD:1F:7D:F6:3A:6B:15:B1:60
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5e:0b:2f:6f:e6:98:17:7f:08:67:9f:5f:50:44:53:33:0f:
0c:df:c3:60:f1:09:89:91:02:f5:1c:ca:e5:38:a9:95:25:b2:
3d:7a:e0:1f:4c:e9:9a:73:15:2f:0a:18:e1:1b:6d:19:53:0e:
aa:cb:d6:43:09:ed:fb:96:e1:77:fd:b0:72:a5:0f:fd:49:35:
43:30:6c:77:d0:2f:11:16:63:f7:29:10:38:57:d9:57:ad:94:
c4:20:c9:84:56:72:1a:78:2c:ae:85:ce:98:0a:91:e8:d8:c5:
5a:72:60:37:0d:a1:03:a8:03:bd:94:2b:43:51:5d:78:64:4a:
61:4b:6e:ed:6b:3a:e8:3c:61:66:e1:fc:e2:75:14:0f:e9:7b:
ad:8c:b0:10:d2:62:9d:c5:49:c0:74:74:bb:a1:96:18:0a:de:
6c:ff:c6:72:1e:1a:b4:19:0a:de:3a:38:4d:84:0b:42:ef:78:
a7:fa:b2:e0:1b:13:88:42:81:a6:99:8a:27:2e:e2:45:58:d8:
2d:d3:5e:7e:3e:93:e2:65:14:50:14:cf:74:4e:64:55:89:05:
fb:7a:ea:14:ff:c6:ab:55:42:c0:9d:a2:85:24:5a:26:b8:90:
56:bf:20:c8:62:36:40:11:33:03:f7:4f:87:7a:29:9d:d6:39:
b7:62:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:26:35 2026 by rpki-client